Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FGDivUabsl8BNWv6-BjpE2ZYHPg.roa
File: FGDivUabsl8BNWv6-BjpE2ZYHPg.roa (raw, json)
Hash identifier: HuO61svVsAKfFuSd3OOhS90gUntK+T0JAZFVRCA2pwc=
Subject key identifier: 14:60:E2:BD:46:9B:B2:5F:01:35:6B:FA:F8:18:E9:13:66:58:1C:F8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0188C30B1A5877116C828FE03F7E5C62535F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FGDivUabsl8BNWv6-BjpE2ZYHPg.roa
Signing time: Fri 16 Jun 2023 07:11:04 +0000
ROA not before: Fri 16 Jun 2023 07:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31195
IP address blocks: 85.26.240.0/22 maxlen: 22
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.75.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.95.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.232.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.229.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
37.29.43.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.228.0/23 maxlen: 23
83.169.230.0/24 maxlen: 24
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
2a03:d006:400::/40 maxlen: 40
2a03:d006:500::/40 maxlen: 40
2a03:d006:200::/40 maxlen: 40
2a03:d006:600::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:0b:1a:58:77:11:6c:82:8f:e0:3f:7e:5c:62:53:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jun 16 07:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1460e2bd469bb25f01356bfaf818e91366581cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:93:8c:f6:69:a1:25:57:f3:47:7b:37:b0:
e4:78:f3:65:7c:5d:35:ef:ef:0f:3b:c5:7e:2a:b5:
68:c5:65:24:76:6f:54:d3:ca:d6:20:94:78:ea:8d:
9a:b1:3d:90:e7:44:df:76:bb:c3:92:1c:92:70:10:
75:5e:a3:30:4c:1d:74:d8:67:36:51:82:62:45:cf:
7b:4f:33:91:ca:12:4e:87:83:cf:cf:3a:00:40:9a:
07:df:c6:30:cf:ee:b8:09:16:3a:a6:a1:35:d6:b4:
35:c4:73:fc:07:f4:10:ee:8e:86:7d:22:da:46:9b:
75:06:1f:21:d6:aa:78:84:9d:ca:5a:d0:1b:7a:12:
d6:5a:99:b1:04:09:a8:34:94:bc:c5:9f:73:4e:3d:
1a:cd:56:66:5b:a7:1f:4e:1e:11:53:9c:e8:85:d2:
3c:e9:b4:9a:91:49:5b:95:4b:5c:1f:0a:27:c1:98:
9e:1e:37:f8:c9:4c:1f:74:1e:c4:34:77:4e:50:17:
20:7f:e0:13:a6:17:cc:e2:4a:47:16:d8:c4:20:6c:
34:f2:8a:d5:45:83:7c:7c:31:27:24:88:15:d4:56:
47:b7:59:47:f2:4b:b7:04:3b:f6:b0:c0:9b:4b:27:
45:c1:c8:c9:79:55:f2:23:14:3f:59:9f:ad:f7:c7:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:E2:BD:46:9B:B2:5F:01:35:6B:FA:F8:18:E9:13:66:58:1C:F8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FGDivUabsl8BNWv6-BjpE2ZYHPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
178.178.75.0/24
188.170.228.0-188.170.237.255
188.170.239.0/24
IPv6:
2a03:d006:200::/40
2a03:d006:400::-2a03:d006:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:a8:8f:cd:fe:71:7e:e0:a9:25:12:de:d6:fe:25:0a:00:ab:
6a:17:2b:7c:dd:f9:6c:de:ba:54:4b:1e:98:6c:86:bc:29:81:
86:d0:e4:1b:dc:22:55:0e:ca:3b:1a:45:30:f4:9c:7c:18:86:
b1:f4:88:2b:a2:9f:1e:13:f9:48:2a:a9:ab:30:75:79:53:dc:
46:fa:0f:ff:4d:3f:71:59:bb:35:ae:b7:bb:e6:94:80:41:bf:
7a:4a:9f:56:cc:e2:35:6a:34:8e:3e:60:31:7b:68:3e:3a:51:
43:e4:ff:b8:0f:49:b5:e5:3b:aa:22:48:10:34:85:4a:09:2f:
fe:fa:e4:ec:ee:a8:3f:8c:b4:16:82:28:1c:bf:fa:60:0f:e1:
0b:52:ae:d9:33:e2:ca:80:1f:e8:c4:a7:f0:a5:a9:69:3a:6c:
ee:21:f2:f2:08:d2:38:20:39:a8:67:c9:f4:d6:e4:08:43:88:
d9:30:cf:e8:2e:14:d1:6c:ff:3e:42:c3:cc:8c:14:26:dd:c5:
03:4d:ff:c6:33:d1:c2:53:e6:04:7c:4c:4d:d9:d7:d0:00:f5:
65:49:80:2d:a7:fd:6c:4d:5b:00:35:8b:ce:e3:d4:f9:c9:50:
ef:18:1d:5f:99:e9:bd:36:60:2e:b5:31:2b:7d:e6:89:bd:75:
32:51:b7:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:43 2025 by rpki-client